Usage policies should require authentication for all technology use to be authenticated with user ID and password or other authentication item. Which choice reflects this requirement?

Usage policies should require authentication for all technology use to be authenticated with user ID and password or other authentication item. Which choice reflects this requirement?

• A. No authentication is required
• B. Authentication for all technology use to be authenticated with user ID and password or other authentication item
• C. Authentication only for remote access
• D. Authentication only for privileged users

Answer: (B)

Requiring authentication for all technology use means every action or access to systems must be tied to a verified identity, so each activity can be attributed to a specific user or entity. This is fundamental for accountability and security: if someone performs an action, there’s a traceable identity behind it, which helps detect misuse and enforce policy. The best choice mirrors this by stating that all technology use must be authenticated with a user ID and password or another authentication item. It coverage is broad—applies to every access, not just remote connections or only to privileged users—so no one can operate without being identified. Why the other ideas don’t fit: skipping authentication entirely would open doors to anonymous or untraceable actions. Limiting authentication to remote access ignores internal activities that also require control and auditability. Limiting authentication to privileged users leaves non-privileged users unconstrained, weakening security and increasing the risk of unauthorized or untraceable actions.

Requiring authentication for all technology use means every action or access to systems must be tied to a verified identity, so each activity can be attributed to a specific user or entity. This is fundamental for accountability and security: if someone performs an action, there’s a traceable identity behind it, which helps detect misuse and enforce policy.

The best choice mirrors this by stating that all technology use must be authenticated with a user ID and password or another authentication item. It coverage is broad—applies to every access, not just remote connections or only to privileged users—so no one can operate without being identified.

Why the other ideas don’t fit: skipping authentication entirely would open doors to anonymous or untraceable actions. Limiting authentication to remote access ignores internal activities that also require control and auditability. Limiting authentication to privileged users leaves non-privileged users unconstrained, weakening security and increasing the risk of unauthorized or untraceable actions.